Last updated: September 18, 2026
Valueskins Pvt. Ltd. ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and related services (collectively, the "Platform").
This Policy complies with the Information Technology Act, 2000; the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; the Digital Personal Data Protection Act, 2023 (DPDP Act) of India; the General Data Protection Regulation (GDPR) of the European Union; and the California Consumer Privacy Act (CCPA).
Please read this Policy carefully. By using the Platform, you consent to the practices described in this Policy. If you do not agree with this Policy, please do not use the Platform.
Account Information: When you create an account, we collect your name, email address, phone number, password (stored as a bcrypt hash, never in plaintext), and profile information such as display name, avatar, and biography.
Tax Compliance Information: For tax-compliant payouts and invoice generation, we collect Permanent Account Number (PAN) for Creators and Goods and Services Tax Identification Number (GSTIN) for Brands. This information is used solely for tax compliance, invoice generation, and TDS purposes.
Profile & Listing Data: Creators may provide professional information including portfolio samples, pricing, profession categories, social media links, and credentials. Brands may provide company information, industry, and campaign preferences.
Deal & Transaction Data: We collect information related to Deals you create or participate in, including deal terms, deliverables, messages, offers, counter-offers, reviews, ratings, and payment transaction records (note: full payment card details are handled by Razorpay and are not stored by us).
Communication Data: Messages sent through the Platform, support inquiries, and communications with other Users are recorded and stored with tamper-evident protections.
Instagram Account Data (Meta): You sign in to ValueSkins with an Instagram professional (Business or Creator) account. With your authorization through Meta's Instagram Login, we receive basic profile information only: your Instagram user ID, username, display name, account type, profile picture URL, follower count, media count, and biography. We use it to sign you in and to show your profile to other Users. We do not receive account insights or analytics, and we do not post, comment, message, or publish to Instagram on your behalf.
Usage Data: We automatically collect information about how you interact with the Platform, including pages visited, features used, time spent, clickstream data, and referring URLs.
Device & Technical Data: IP address, browser type and version, operating system, device type, unique device identifiers, and other technical information.
Cookies & Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage, and provide personalized content. See Section 10 (Cookie Policy) for details.
Direct Collection: You provide information directly when you create an account, complete your profile, create Deals, send messages, submit support requests, or otherwise use the Platform.
Automatic Collection: We automatically collect usage and device data when you interact with the Platform through cookies, server logs, and analytics tools.
Third-Party Sources: We receive information from Meta when you sign in with Instagram, as described below. We may also receive information from our payment processor (Razorpay) limited to transaction status and identifiers (not full payment details).
Meta / Instagram: When you sign in with Instagram, we receive the data described in Section 2 under the single permission instagram_business_basic, which you grant on Instagram's consent screen. We do not read any data from an Instagram account other than the one you sign in with.
We use your information for the following purposes:
To Provide Services: Operate, maintain, and provide the Platform's features, including account management, Deal creation and execution, messaging, payment processing, and dispute resolution.
Sign-in and your profile: Your Instagram login identifies your account, and your Instagram profile information (username, profile picture, follower count) is shown on your ValueSkins profile so the other party in a deal can confirm who they are working with.
To Improve the Platform: Analyze usage patterns, conduct research, perform analytics, and develop new features to enhance user experience.
To Communicate with You: Send administrative messages (account verification, password resets, deal updates), service announcements, technical notices, and support responses.
To Ensure Safety & Security: Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.
To Comply with Legal Obligations: Fulfill legal requirements, respond to lawful requests from authorities, and enforce our rights.
With Your Consent: For any other purpose disclosed to you at the time of collection, with your consent.
For users in the European Economic Area (EEA), we process your personal data under the following legal bases:
Contractual Necessity: Processing necessary to perform our contract with you (e.g., account management, Deal execution).
Legitimate Interests: Processing for our legitimate interests (e.g., improving the Platform, fraud prevention, security) that do not override your fundamental rights.
Consent: Processing based on your explicit consent (e.g., marketing communications, non-essential cookies). You may withdraw consent at any time.
Legal Obligation: Processing necessary to comply with legal obligations.
Service Providers: We share data with trusted third-party service providers who help us operate the Platform, subject to contractual obligations to protect your data:
• Payment Processing: Razorpay (INR payments) — transaction data necessary to process payments
• Hosting & Infrastructure: Vercel, Render, AWS — data hosting and storage
• Authentication: Meta (Instagram Login) — to verify your identity when you sign in
• Analytics: We do not use third-party behavioral advertising trackers. Where analytics are used, we process de-identified usage data ourselves or through a processor bound by this Policy, only with your consent where required by law.
• Instagram / Meta: We interact with Meta Platforms solely to sign you in and retrieve the basic Instagram profile data described in Section 2, subject to Meta's Platform Terms. We do not otherwise share your Instagram data with any third party.
• Communications: Email service providers for transactional emails
Other Users: Your profile information is visible to other Users as part of the Platform's marketplace functionality. Deal-related communications are visible to the participants of the Deal.
Legal Requirements: We may disclose your information if required to do so by law, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change.
We do not sell your personal information to third parties for marketing or advertising purposes.
Active Accounts: We retain your information for as long as your account is active and as needed to provide you with services.
Deleted Accounts: When you request account deletion, a 30-day grace period begins during which you may cancel the deletion. After 30 days, your personal data is permanently deleted by our automated deletion system. Deal messages are retained for 90 days after deletion for dispute resolution purposes, then permanently deleted. Instagram profile data is retained only while your account is active and is removed upon account deletion.
Deal Records and Tax Documents: Deal records, transaction history, invoices, payment status, and associated audit logs are retained for a minimum of seven years as required by Indian tax law, accounting standards, and legal obligations. This is because a deal is a binding agreement between two parties and one party cannot erase the shared record of it.
Logs: Server logs containing IP addresses and technical data are retained for 30 days.
Anonymized Data: Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and platform improvement.
Legal Holds: Data may be retained longer if required by applicable law, regulatory obligations, or legal proceedings.
Under the DPDP Act (India):
• Right to Access: Request a summary of your personal data held by us
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal exceptions)
• Right to Grievance Redressal: Lodge complaints regarding data processing
• Right to Nominate: Nominate a person to exercise your rights after your death
Under the GDPR (EEA Users):
• Right to Access: Obtain confirmation of whether we process your data and request a copy
• Right to Rectification: Correct inaccurate data
• Right to Erasure (Right to be Forgotten): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time without affecting lawfulness of prior processing
Under the CCPA (California Users):
• Right to Know: Request disclosure of data categories collected, sources, purposes, and third parties
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of your personal information (we do not sell data)
• Right to Non-Discrimination: We will not discriminate against you for exercising these rights
To Exercise Your Rights: Contact us at valueskinsfounder@gmail.com. We will respond to your request within the timeframes required by applicable law (generally 30 days). We may need to verify your identity before processing your request.
We implement robust security measures to protect your data:
• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.3+
• Encryption at Rest: Sensitive data (passwords, PII, payment tokens) is encrypted using AES-256-GCM
• Password Hashing: Passwords are hashed using bcrypt with a minimum of 12 salt rounds
• Access Controls: Strict role-based access controls (RBAC) and row-level security (RLS) on all databases
• Rate Limiting: Per-user and per-IP rate limiting to prevent abuse
• Audit Logging: All access to sensitive data is logged with immutable audit trails
• Regular Audits: Periodic security assessments, vulnerability scanning, and penetration testing
• Incident Response: Documented incident response plan with breach notification procedures
Despite these measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
We use cookies and similar technologies to enhance your experience. Here is what we use:
Essential Cookies: Required for the Platform to function (session management, CSRF protection, authentication). No consent required. These cannot be disabled.
Analytics Cookies: Help us understand how you use the Platform (pages visited, features used). We use PostHog for product analytics and session replay. These are only set with your consent where required by law.
Session Replay: With your consent, PostHog records session replays showing how pages were used, including clicks and navigation. Personal information is masked: passwords, one-time codes, email and phone fields are never captured, and screens containing personal details are hidden from recordings. Session replays are stored and used only to diagnose problems and improve the platform. You can withdraw analytics consent at any time.
Preference Cookies: Remember your settings and preferences.
Managing Cookies: You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. You can also use our cookie consent banner to manage your preferences.
Your data may be transferred to and processed in countries other than your own. Our hosting and service providers operate globally, including in India, the United States, and the European Union.
GDPR Adequacy: For EEA users, we ensure appropriate safeguards for data transfers through Standard Contractual Clauses (SCCs) or adequacy decisions as required under applicable law.
DPDP Act: For Indian users, data is primarily stored within India. Where data is transferred outside India, we ensure equivalent levels of protection as required under the DPDP Act.
The Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information.
All deal-related communications (including but not limited to messages, offers, counter-offers, contract terms, and file submissions sent through the ValueSkins deal room) are permanently recorded with the following properties:
Tamper-evident storage: Each message is cryptographically hash-chained to the previous message. Any modification to a past message breaks the chain and is detectable.
Server-authoritative timestamps: All timestamps are assigned by our servers at the moment of receipt. Client-side timestamps are not accepted.
Signed proof export: You may export a verifiable proof of any deal, which includes an RSA signature over the hash chain. This signature can be independently verified without contacting ValueSkins.
Recording consent: Before sending your first message in any deal room, you will be shown a notice explaining that the conversation is permanently recorded. Sending a message constitutes your consent to recording. Your consent choice is logged in our system.
Retention: Deal messages are retained for the duration of your account plus 90 days after account deletion, or as required by applicable law (whichever is longer).
To delete your account and data, sign in, open My Data, and choose Delete Account, or email valueskinsfounder@gmail.com from the address on your account. You can also remove ValueSkins from your Instagram account at any time under Instagram Settings → Website permissions → Apps and websites. When you request account deletion, the following happens:
• A 30-day grace period begins during which you may cancel the deletion
• After 30 days, your personal data is permanently deleted by our automated deletion system
• Deal messages are deleted as part of this process (retained for 90 days for dispute resolution)
• Anonymized audit log entries may be retained for legal compliance
• Backup copies are purged within 90 days
• Instagram profile data is deleted as part of account deletion
In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns regarding data processing and privacy:
Grievance Officer: Saketh Velamuri
Company: Valueskins Pvt. Ltd.
Email: valueskinsfounder@gmail.com
We will acknowledge your complaint within 24 hours and resolve it within 30 days as required by law.
Payment Processor: All payments are processed through our payment processor (currently Razorpay). ValueSkins does not store, process, or have access to payment card details, bank account information, or UPI IDs. All payment security and storage is handled exclusively by our payment processor.
Valueskins is committed to ensuring that our Platform is accessible to all users, including persons with disabilities. We process personal data for persons with disabilities in accordance with applicable accessibility laws and standards:
Accessibility Commitments:
• We strive to comply with Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards
• The Platform supports assistive technologies including screen readers, keyboard navigation, and text scaling
• All images include descriptive alt text for users relying on screen readers
• Color contrast ratios meet accessibility standards to support users with visual impairments
• We provide captions or transcripts where relevant for multimedia content
• Keyboard navigation is fully supported as an alternative to mouse-based interaction
Data Processing for Accessibility: We may process additional data related to accessibility features you use (e.g., screen reader detection, accessibility preferences, assistive technology information) solely to enhance your experience and ensure the Platform functions correctly with your accessibility tools. This data is never shared with third parties for marketing or profiling purposes.
Accessibility Feedback: If you encounter accessibility barriers or have suggestions for improvement, please contact us at valueskinsfounder@gmail.com. We welcome your feedback and will respond promptly.
For users in the European Economic Area, you may contact our Data Protection Officer at valueskinsfounder@gmail.com. You also have the right to lodge a complaint with your local data protection supervisory authority.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Platform. The "Last updated" date at the top of this Policy indicates when it was last revised. Your continued use of the Platform after the changes take effect constitutes your acceptance of the updated Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Registered Entity: Valueskins Pvt. Ltd.
Email: valueskinsfounder@gmail.com
Support: valueskinsfounder@gmail.com
We use cookies to improve your experience. Essential cookies are required for authentication. Analytics & marketing cookies are optional. Learn more.